Privacy statement

Thank you for visiting our website. The protection and security of your personal information when using our website is very important to us. Therefore, we would like to inform you at this point which of your personal data we collect when you visit our website and the purposes for which it is used.

This privacy statement applies to the Hymmen GmbH Maschinen- und Anlagenbau website, which can be accessed under the domain www.hymmen.com, and the various subdomains (“our website”).

 

Who is responsible and how can you contact us?

Controller

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Hymmen GmbH Maschinen - und Anlagenbau
Theodor-Hymmen-Strasse 3
33613 Bielefeld, Germany
Tel.: +49 521 5806 0
Email: info(at)hymmen.com

 

Data protection officer
Tim Walter
Mein-Datenschutzbeauftragter.de
Rudolf-Diesel-Strasse 10
23617 Stockelsdorf
Germany / Schleswig-Holstein

Telephone: +49 451 160 852 35
Email: tim.walter(at)hub24.de

 

What does it entail?

This privacy statement fulfils the legal requirements for transparency when processing personal data. This is any information that relates to an identified or identifiable natural person. This includes, for example, information such as name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting a website. Information with which we cannot (or can only with disproportionate effort) establish a link to your person, e.g. through anonymisation, does not constitute personal data. Processing of personal data (such as the collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data is erased as soon as the purpose of processing has been achieved and there are no legitimate grounds for further retention of the data. We will inform you in the individual processing procedures about the concrete storage periods and criteria for storage. Regardless of this, we will store your personal data in individual cases to assert, exercise or defend legal claims, and where there are statutory retention obligations.

 

Who receives my data?

We only share your personal data that we process on our website with third parties if it is necessary for the fulfilment of the purposes and is covered by the legal basis in the individual case (e.g. consent or safeguarding legitimate interests). Furthermore, we share personal data with third parties in individual cases if it serves the assertion, exercise or defence of legal claims. Possible recipients may then be, for example, law enforcement authorities, lawyers, auditors, courts etc.

Insofar as we use service providers who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 GDPR for the operation of our website, they may be recipients of your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing procedures.

 

Do you use cookies?

Cookies are small text files which are sent from us to the browser of your device and stored there, when you visit our website. As an alternative to the use of cookies, information can be stored in your browser’s local storage. Some of our website’s functions cannot be offered without the use of cookies or local storage (technically necessary cookies). However, other cookies enable us to carry out various analyses, such that we are able, for example, to recognise the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). The use of cookies enables us to make our website more user-friendly and effective, among other things, by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run any programmes or contain viruses.

Information about the respective services for which we use cookies is provided in the individual processing procedures.

Edit cookie settings

 

What rights do I have?

Subject to the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

  • Information pursuant to Art. 15 GDPR on the data stored about your person, in the form of meaningful information regarding the processing details as well as a copy of your data;
  • Rectification pursuant to Art. 16 GDPR of incorrect or incomplete data that we have stored;
  • Erasure pursuant to Art. 17 GDPR of the data we store unless the processing is necessary to exercise the right of freedom of opinion and information, to fulfil a legal obligation, on the grounds of public interest or to assert, exercise or defend legal claims;
  • Restriction of processing pursuant to Art. 18 GDPR, if the accuracy of the data is disputed, the processing is illegitimate, we no longer require the data but you do not wish the data to be deleted because you require it to assert, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.
  • Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) (a) GDPR or on the basis of a contract pursuant to Art. 6 (1) (b) GDPR, and this has been processed by us with the help of automated procedures. You will receive your data in a structured, current and machine-readable format or we will transmit the data directly to another controller insofar as this is technically feasible.
  • Objection pursuant to Art. 21 GDPR to the processing of your personal data if it is based on Art. 6 (1) (e), (f) GDPR and there are grounds relating to your personal situation, or the objection is directed towards direct marketing. The right to object does not apply if overriding, compelling legitimate grounds for processing are demonstrated or processing is carried out to assert, exercise or defend legal claims. If the right to object does not apply for individual processing procedures, this is indicated there.
  • Revocation pursuant to Art. 7 (3) GDPR of the consent you have given us with effect for the future.
  • Complaint pursuant to Art. 77 GDPR to a regulatory authority if you are of the opinion that the processing of your personal data contravenes the GDPR. As a rule, you can contact the supervisory authority at your habitual residence, place of work, or our place of business.
     

How is my data processed in detail?

In the following, we will inform you of the individual processing procedures, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. There is no automated decision in individual cases, including profiling.

Provision of the website

Nature and scope of processing

When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

IP address of the inquiring computer
Date and time of access
Name and URL of the file accessed
Website from which access takes place (Referrer URL)
Browser used and possibly the operating system of your computer as well as the name of your access provider
Our website is not hosted by us ourselves, but rather a service provider who processes the aforementioned data on our behalf pursuant to Art. 28 GDPR.

 

Purpose and legal basis

Processing takes place to safeguard our legitimate interests in displaying our website and to guarantee security and stability on the basis of Art 6 (1) (f) GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. A right to object to the processing does not apply due to the exception pursuant to Art. 21 (1) GDPR. If the continued storage of the log files is required by law, processing is carried out on the basis of Art. 6 (1) (c) GDPR. There is no legal or contractual obligation to provide the data; however, visiting our website without providing the data is not technically possible.

 

Storage period

The aforementioned data is stored for the length of time the website is displayed.

 

Duties to inform for applicants pursuant to Art. 13 and Art 14 GDPR

If you apply to Hymmen GmbH Maschinen- und Anlagenbau by electronic means, your details will be used exclusively for the purposes of processing your application; they will not shared with third parties. Please note that applications sent to Hymmen GmbH Maschinen- und Anlagenbau by email will be transmitted in unencrypted form. In this respect, there is a risk that unauthorised persons may intercept and use this data.

We only collect and process the personal data that you have supplied to us as part of the application process. This is the data listed below (type of data):

  • Personal details (name, address and other contact details, place of birth, date of birth, nationality)
  • Bank details (e.g. for possible reimbursement of travel expenses)
  • Authorisation data (e.g. ID data)
  • Authentication data (e.g. sample signature)
  • Health data (information on disabilities or severe disabilities)
  • Qualification documents (certificates, appraisals or similar proof of training)

Processing is carried out with consideration to and in accordance with the applicable General Data Protection Regulation (GDPR) as well as the new German Federal Data Protection Act (BDSG-new) and sector-specific data protection standards in the course of the application process, such as the German Social Code, the German Telecommunications Act and the German Works Council Constitution Act.

We process your data, as far as necessary, to safeguard our legitimate interests or the legitimate interests of third parties. These include, for instance, the assertion of legal claims and defence in legal disputes, measures for business management and further development.

With your consent to the processing of personal data, the legality of the collection and processing of your personal data is based on the consent you have given to us. This can be revoked at any time. Revocation shall be effective for the future and cannot be issued retrospectively. Should consent to the processing of the personal data collected be revoked, the purpose for which it was collected can no longer be fulfilled or implemented.

The data collected will be shared within our company with the relevant bodies which have been entrusted with the processing of the application process and need it to fulfil legal obligations.

Your data will only be shared due to statutory regulations, if you give us your consent or if we are authorised to provide information about it. These are data recipients such as affiliated companies (application process for other advertised positions), for which you have given us your consent to transmit the data.

Your data will be processed and stored, as far as necessary, for the duration of the application process. After the purpose has been fulfilled, but at the latest after 6 months, we shall erase it. If storage of the data is no longer necessary for carrying out the application process and there is no legal retention period for this, or if we do not have your consent to justify a longer storage period, the data will be deleted immediately.

No data will be transmitted to a third country, i.e. countries outside the European Economic Area - EEA.

Within the scope of the legal requirements of the GDPR and the BDSG-new, every data subject has the right to information about the processing of their personal data, the right to rectification, erasure and restriction of said data, as well as the right to object to the processing and the right to data portability. When asserting the right to information and erasure, the restrictions of sections 33 and 34 of the BDSG-new must be taken into consideration. Furthermore, you have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR in conjunction with section 19 BDSG-new.

No automated decision-making processes are used within our application process.

We do not use profiling data to establish and carry out the application process.

 

Presence on social media platforms

We maintain so-called fan pages, accounts or channels on the networks mentioned below so as to also provide you with information and offers within social networks and to offer you further ways of getting in touch with us and finding out about our offers. In the following, we will inform you about which of your data we or the respective social network process in connection with visiting and using our fan pages/accounts.

 

Data we process about you

If you would like to contact us via Messenger or Direct Message via the respective social network, we normally process the user name under which you contact us and, if necessary, store further details that you have supplied, insofar as this is necessary for processing/answering your query.

The legal basis is Art. 6 (1) (f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).

 

(Static) user data that we receive from the social networks

We receive automated statistics regarding our accounts via insights functions. The statistics include, among other things, the total number of page views, likes, details of page activities and interactions with posts, reach, video views and details of the proportion of men/women among our fans/followers.

The statistics only contain aggregate data that cannot be related to individual persons. You cannot be identified by us in this way.

 

Which of your data do the social networks process?

You do not have to be a member of the respective social network to be able to view the content of our fan pages or accounts; therefore, no user account is required for the respective social network.

However, please note that the social networks also collect and store data from website visitors without a user account when the respective social network is visited (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no control. Details on this can be found in the data protection provisions of the respective social network (see corresponding links above).

Should you wish to interact with the contents of our fan pages/accounts, e.g. commenting on, sharing or liking our posts/contributions, and/or get in touch with us via Messenger functions, prior registration with the respective social network and disclosure of personal data will be necessary.

We have no control over data processing by the social networks within the scope of their use by you. To the best of our knowledge, your data will be stored and processed, in particular in conjunction with the provision of the services of the respective social network, and to analyse user behaviour (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising is displayed based on your interests both within and outside the respective social network. The possibility of your data being stored by the social networks outside the EU/EEA and passed on to third parties cannot be ruled out.

Among other things, information about the exact scope and purposes of processing your personal data, the storage period/erasure and guidelines for using cookies and similar technologies when registering and using social networks can be found in the data protection provisions/cookie guidelines of the social network. Information regarding your rights and ways in which you can object can also be found there.

 

Facebook page

When visiting our Facebook page, Facebook records, among other things, your IP address as well as further information that is available on your PC in the form of cookies. This information is used to provide us as the operator of the Facebook pages with statistical information about the use of the Facebook page. Facebook provides further information on this at the following link: https://facebook.com/help/pages/insights.

It is not possible for us to draw conclusions regarding individual users by means of the statistical information transmitted. We only use it to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We only collect your data via our fan page in order to implement a possible provision for communication and interaction with us. The data collected usually includes your name, the content of your message, comment content and the profile information you provide “publicly”.

The processing of your personal data for our purposes mentioned above is carried out based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) (f) GDPR. If you as the user have given the respective social network provider your consent to data processing, the legal basis of the processing extends to Art. 6 (1) (a), Art. 7 GDPR.

Due to the fact that the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorised to have full access to your data. For this reason, only the provider can take and implement appropriate measures to fulfil your user rights (information request, erasure request, objection, etc.). As such, the most effective way of asserting said rights is to the respective provider directly.

Together with Facebook, we are responsible for the personal content on the fan page. Data subject rights can be asserted to Facebook Ireland and to us.

The primary responsibility for processing insights data lies with Facebook in accordance with GDPR and Facebook fulfils all GDPR obligations regarding processing of insights data. Facebook Ireland provides data subjects with the essential Page Insights Addendum.

We do not take any decisions relating to the processing of insights data or any other information resulting from Art. 13 GDPR, including the legal basis, identity of the data controller and the length of time cookies are stored on user terminals.

Further information can be found on Facebook directly (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

 

XING site

XING is a social network from XING SE based in Hamburg, Germany, which enables the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Companies can create user profiles, where they can upload photos and information about the company. Other XING users have access to this information, and can write their own articles and share this content with others.

The focus is on professional exchange on specialist topics with people who have the same professional interests. Furthermore, XING is often used by companies and other organisations to find employees and present themselves as an interesting employer.

Further information on XING can be found at: https://corporate.xing.com/de/unternehmen/

Further information on data protection at XING can be found at: https://privacy.xing.com/de/datenschutzerklaerung.

We do not collect or process any personal data via our XING company website.

 

Other third-party providers we use:

Google CDN

Nature and scope of processing

We use Google CDN to aid the correct provision of our content. Google CDN is a service provided by Google Ireland Limited, which acts as a Content Delivery Network (CDN) on our website.

A CDN helps to make the content on our website, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. If you access this content, you are connecting to servers operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to ensure the security and functionality of Google CDN.

 

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our website pursuant to Art. 6 (1) (f) GDPR.

 

Storage period

We have no control over the concrete storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the Google CDN privacy statement: https://policies.google.com/privacy.

 

Google Fonts

Nature and scope of processing

We use Google Fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a font service provider for our website. To obtain these fonts, you are connecting to servers operated by Google Ireland Limited, where your IP address is transmitted.

 

Purpose and legal basis

The use of Google Fonts is based on our legitimate interests, i.e. interest in a consistent provision and optimisation of our website pursuant to Art. 6 (1) (f) GDPR.

 

Storage period

We have no control over the concrete storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the Google Fonts privacy statement: https://policies.google.com/privacy.

 

Google reCaptcha

Nature and scope of processing

We have integrated Google reCAPTCHA components in our website. Google reCAPTCHA is a service provided by Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated by means of a programme. If you access this content, you are connecting to servers operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and possibly browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's dwell time and mouse movements to distinguish automated requests from human ones. This data is processed exclusively for the purposes mentioned above and to ensure the security and functionality of Google reCAPTCHA.

 

Purpose and legal basis

The use of this service is based on our legitimate interests, i.e. protection when transmitting forms pursuant to Art. 6 (1) (f) GDPR.

 

Storage period

We have no control over the concrete storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the Google reCAPTCHA privacy statement: https://policies.google.com/privacy?hl=en-US.

 

YouTube NoCookie

Nature and scope of processing

We have integrated YouTube NoCookie in our website. YouTube NoCookie is a component of the video platform of YouTube, LLC, on which users can upload content, share it on the internet and receive detailed statistics.

YouTube NoCookie enables us to integrate content from the platform in our website.

YouTube NoCookie uses cookies and further browser technologies in order to evaluate user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content listened to and create reports. If a user is registered with YouTube, LLC, YouTube NoCookie can assign the videos played to the profile.

If you access this content, you are connecting to servers operated by YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and possibly browser data such as your user agent are transmitted.

 

Purpose and legal basis

The use of this service is based on your consent pursuant to Art. 6 (1) (a) GDPR.

 

Storage period

We have no control over the concrete storage period of the processed data; this is determined by YouTube, LLC. Further information can be found in the YouTube NoCookie privacy statement: https://policies.google.com/privacy.

 

YouTube

Nature and scope of processing

We have integrated YouTube Video in our website. YouTube Video is a component of the video platform of YouTube, LLC, on which users can upload content, share it on the internet and receive detailed statistics.

YouTube Video enables us to integrate content from the platform in our website.

YouTube Video uses cookies and further browser technologies in order to evaluate user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content listened to and create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile.

If you access this content, you are connecting to servers operated by YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and possibly browser data such as your user agent are transmitted.

 

Purpose and legal basis

The use of this service is based on your consent pursuant to Art. 6 (1) (a) GDPR.

 

Storage period

We have no control over the concrete storage period of the processed data; this is determined by YouTube, LLC. Further information can be found in the YouTube Video privacy statement: https://policies.google.com/privacy.